News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 13 Oct· 85 articles
-
Misconfigured Server Exposed Medical Data on 109,700 People
A data exposure affecting Liberating Research, a UK-based medical survey company, was disclosed after UpGuard researchers identified an Elasticsearch server misconfigured to allow public access to the data. The server stored a mix of personally identifiable…
DataBreaches -
Norway fines ad tech firm Xandr $9.6 million over Grindr data sharing
Norway’s data protection regulator, Datatilsynet, has fined the advertising technology firm Xandr 92 million Norwegian kroner (about $9.6 million) for unlawfully processing and sharing sensitive information about Grindr users. The enforcement concerns Grindr…
Malwarebytes -
AI SPERA to Demonstrate Threat Intelligence and Exposure Tools in Tokyo
Criminal IP, the cyber threat intelligence and attack surface management offering operated by AI SPERA, will be demonstrated at Security Days Fall 2026 Tokyo, running from 21 to 23 October at the TAKANAWA GATEWAY Convention Center. At booth B20, the team…
SecurityOnline -
Experts and Ransomware Groups Weigh In on ShinyHunters’ Future
The article is a brief pointer to an analysis by Marco A. De Felice of SuspectFile, rather than a report of its findings. It says he asked cybersecurity experts and ransomware groups for their views on ShinyHunters, including the group’s future, but does not…
DataBreachesShinyHunters -
Danfoss AK-SM 8xxA Series2 articles this day · The Hacker News first
Attackers Set French Supermarket Freezers to Defrost, Causing Fires · Hackers Hijack Danfoss Controllers, Spoiling Food in French Supermarkets
-
Attackers Set French Supermarket Freezers to Defrost, Causing Fires
Overnight from 11 to 12 October 2026, hundreds of French supermarkets were hit when attackers remotely forced refrigeration controllers to switch into defrost mode, heating fridges and freezers to as high as 50°C. The resulting spoilage and at least two…
-
Hackers Hijack Danfoss Controllers, Spoiling Food in French Supermarkets
Attackers gained remote control of Danfoss refrigeration controllers at hundreds of French supermarkets on the night of 11 October 2026, warming fridges and freezers to as high as 50°C and forcing stores to discard affected goods. The intrusion targeted…
-
-
Swann camera flaws let local attackers view live feeds without authentication
Swann Communications SWIFI-SE2KIC cameras with firmware version 2.0.22 or earlier are implicated in three related vulnerabilities that could allow an attacker on the local network to access live video information without authentication. The issues are listed…
-
Anthropic warns small AI models could soon self-replicate across IoT devices
Anthropic’s Frontier Red Team warns that small AI models could soon self-replicate across IoT devices, running inference directly on compromised equipment rather than from a data centre. In experiments, researchers used 15 off-brand Android TV boxes at about…
SecurityWeek -
AI Powered Attacks Spur a New Push for Runtime Identity Controls
The Hacker News reports on an upcoming expert-led webinar titled “How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls,” published on 13 October 2026. The piece argues that the real risk of identity theft goes beyond initial sign-in:…
The Hacker News -
GitLab3 articles this day · The Hacker News first
GitLab fixes critical flaw that lets attackers execute code via CI/CD regexes · GitLab rushes to patch critical flaw enabling unauthenticated server takeover
-
GitLab fixes critical flaw that lets attackers execute code via CI/CD regexes
CVE-2026-97229 is a critical, unauthenticated remote code execution flaw in GitLab’s CI/CD regular expression compiler, tracked as CWE-190 (integer overflow). GitLab reports a CVSSv3.1 score of 10.0, with exploitation possible when a malicious regular…
-
GitLab rushes to patch critical flaw enabling unauthenticated server takeover
GitLab has issued an urgent patch for CVE-2026-97229, a critical unauthenticated remote code execution flaw in the CI/CD Regular Expression Compiler. Classified with a CVSS v3.1 score of 10.0, the issue arises from an integer overflow when processing a…
-
GitLab Patches Critical Flaw That Could Let Attackers Run Server Code
GitLab has issued patches for a critical vulnerability, CVE-2026-97229, that could let an unauthenticated attacker run arbitrary server code. GitLab described the flaw as an integer overflow arising from insufficient regular expression validation in a CI/CD…
-
-
Cyberattack Disrupts Refrigeration at Hundreds of French Supermarkets
A cyberattack disrupted refrigeration across hundreds of French supermarkets, forcing the destruction of refrigerated and frozen goods after attackers interfered with the systems that manage cooling. The incident occurred overnight from 11 to 12 October 2026…
Malwarebytes -
XWorm RAT Adds Browser Hijacking, Live Audio and GPS Surveillance
SecurityWeek reports that the XWorm remote access trojan (RAT) has been expanded into a full surveillance platform, with the developer community adding new plugins to broaden its capabilities. The threat, first seen in 2022, now supports 46 plugins (up from…
SecurityWeek -
LG Smart TV Flaw Chain Lets Network Attackers Gain Root Access
LG has disclosed three webOS vulnerabilities in its smart TVs that can be chained from a local network to give an attacker root access on certain devices, without requiring a PIN or any owner interaction. The chain was demonstrated on two models, the…
The Hacker News -
AI Speeds Up Cyberattacks, Making Zero Trust and Recovery More Urgent
In SecurityWeek’s interview with IBM UK’s Steve Wallin, the impact of AI on cyberattacks is framed as a speed and scale problem rather than a new technique. Phishing remains the leading attack vector, accounting for 17% of breaches and averaging $5.29 per…
SecurityWeek -
Fake Ledger Wallets Stole Recovery Phrases in $86 Million Scam
A SecurityWeek report details a supply-chain compromise affecting Ledger signers sold via Southeast Asia’s CryptoBilis reseller. The investigation indicates an unauthorised hardware implant was added to the devices, designed to intercept user data during…
SecurityWeek -
Bitdefender Adds AI Risk Visibility to Windows Endpoint Security
Bitdefender GravityZone AI Visibility and Control (AIVC) is described as a discovery and risk layer that answers key questions about AI on protected Windows endpoints: which AI software is present, who is running it, and how risky each tool is. The article…
The Hacker News -
Tampered Ledger wallets sold in Europe amid $92m crypto losses
Investigators have uncovered a supply‑chain compromise affecting Ledger hardware wallets sold in Europe, following earlier findings in Malaysia. A distributor for Ledger allegedly tampered with devices at the point of distribution, embedding an extra circuit…
SecurityOnline -
UK to Use Frontier AI to Find Flaws Before Hackers Do
The British government has unveiled a broad set of AI security initiatives aimed at strengthening protection against emerging threats. Speaking at Imperial College London on 12 October, AI minister Kanishka Narayan outlined plans to employ frontier models to…
Infosecurity -
Ahold Delhaize Takes Systems Offline After Cyber Incident
Ahold Delhaize reports it responded to a cyber incident by taking some systems offline to contain the issue, while emphasising that stores remained open and its ability to serve customers was not affected. The Belgian-Drench multinational said it was…
SecurityWeek -
Anthropic Cuts Claude Reasoning Data Leaks by Up to 99% to Block AI Distillation
Anthropic says it has strengthened Claude AI’s defenses against model distillation, a technique in which attackers harvest transcripts and reasoning logs to train smaller, inferior models. The firm reports that their new safeguards have dramatically cut the…
SecurityOnline -
Bitwarden Moves App Store Builds to a Proprietary Licence, Keeping GPL Code Public
Bitwarden has announced that from its forthcoming release, applications distributed through major app stores, notably the Apple App Store and Google Play Store, will be built under a commercial, proprietary license rather than the current dual-license setup.…
SecurityOnline -
Ubuntu 27.04 Gets a Dinosaur Codename and April 2027 Release Date
Ubuntu 27.04 is slated as the non‑LTS successor to the 26.10 release, with Canonical outlining a mid‑2027 release cadence. The official schedule places the feature freeze for 27.04 on 25 February 2027, followed by a beta on 1 April, a release candidate on 15…
SecurityOnline -
G2A Marketplace Sees Antivirus Orders Rise 35% as Security Worries Grow
G2A[.]COM, a digital marketplace used by more than 35 million customers across 180 countries, has reported a 35% year-on-year rise in orders for antivirus and other security software. The data, released during Cybersecurity Awareness Month, shows that…
SecurityOnline -
One in Five UK Security Chiefs Avoid Patch Tuesday Overload
One in five UK CISOs, CSOs and heads of IT security surveyed by Socura say they have called in sick or deliberately booked holiday to dodge Patch Tuesday, the monthly security updates from Microsoft, Adobe and others. The poll of 500 senior security leaders…
Infosecurity -
MarkLogic flaws let low privilege accounts seize server admin control
Progress Software’s MarkLogic Server has 31 newly disclosed vulnerabilities, with five rated critical. The flaws could let an account that already has only management privileges escalate to full administrative control of the server, including creating…
-
Hackers Turn European Supermarket Fridges Up to 50°C
A large cyberattack has targeted refrigeration controllers across hundreds of European supermarkets, causing many fridges and freezers to defrost overnight. The incident affected major chains including Auchan, Carrefour, E[.]Leclerc, Intermarché, and…
SecurityWeek -
Fake Web3 accelerator’s npm packages backdoor Windows and Macs
Elastic Security Labs has traced two malicious npm packages to a counterfeit Web3 accelerator branded as “Apex.” The packages, named @apexacc/cli and @apexacc/audit, were pitched as free AI credits, a coding assistant, and security audits for crypto…
SecurityOnline -
Cyberattack Turns Up Refrigeration in Hundreds of French Supermarkets
Overnight from Sunday to Monday, a large cyberattack disrupted refrigeration systems across hundreds of French supermarkets, with Danfoss’s cooling controls remote‑manipulated to raise temperatures to 50°C. BFMTV reported that the attack caused fresh and…
Security Affairs -
Scammers Use Your Name to Lure You Into Text Conversations
Text scammers are honing a simple opener that relies on personal data exposed in breaches: a message that starts with the recipient’s name followed by a question mark. Malwarebytes reports that the tactic is deliberately minimal—no suspicious links, no…
Malwarebytes -
AI Driven Attack Turned an Exposed Tomcat Endpoint Into a Server Takeover
ReliaQuest Threat Spotlight has documented an AI-driven attack that turned a single exposed endpoint into a full server takeover in under 24 hours. The intrusion entered through an Apache Tomcat server running a Spring Batch application that accepted job…
SecurityOnline -
Kimsuky Uses Reply Bait to Target Ukrainian Diplomats and Experts
Genuinely, North Korea-linked actor Kimsuky has been observed conducting a reply‑baiting spear‑phishing campaign aimed at Ukrainian diplomacy, security professionals and international policy experts, under the umbrella of Operation GitPower. Beginning in…
SecurityOnlineKimsuky -
Preloaded Android malware turns budget phones into proxy bots
Bitdefender has traced a supply-chain–level campaign in which low-cost Android handsets, built on MediaTek platforms, come preinstalled with malware that can covertly install or uninstall apps, harvest device and app data, and load remote payloads. The…
The Hacker News -
Windows 11 23H2 Enterprise Security Updates End on 10 November 2026
Microsoft has confirmed that Windows 11 version 23H2 Enterprise, Education and IoT Enterprise will reach end of support on 10 November 2026. After this date, Microsoft will stop delivering monthly security updates for these editions, meaning organisations…
SecurityOnline -
Firefox 158 Enables JPEG XL by Default, Boosting Image Format Adoption
Mozilla Firefox 158.0 is officially available, featuring default JPEG XL image format support, CSS enhancements, and advanced WebDriver automation capabilities. Related Posts: Intel Implements Significant Price Increases on PC Processors Yandex Cloud Drone…
SecurityOnline -
Hackers Trigger Defrost in French Supermarkets, Spoiling Food and Sparking Fires
A massive French supermarket cyberattack targeted Danfoss refrigeration systems, causing catastrophic food spoilage and fires across 400 retail locations. Related Posts: Suspected TraderTraitor Hackers Use Trojanized Terraform Provider to Deliver FLATROOF…
SecurityOnline -
Intel reportedly raises premium processor prices by up to 20%
Recent reports from the Taiwan supply chain indicate major Intel and AMD PC processor price hikes, with high-end CPUs seeing up to a 20% increase. Related Posts: Firefox 158.0 Released: Default JPEG XL Support Yandex Cloud Drone Strike Causes Widespread…
SecurityOnline -
SAP Patches Critical Cloud SDK Flaw That Could Expose Credentials
SAP Security Patch Day October 2026 fixes four critical vulnerabilities, including a CVSS 10.0 Cloud SDK flaw and 9.9 bugs in Visual Composer and S/4HANA. Related Posts: IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo AI Service Discourse…
-
Ukrainian Strike on Yandex Data Centre Disrupts Services Across Russia
The article reports that Ukrainian forces struck the Yandex Cloud data centre in Vladimir, Russia, causing widespread service outages across a range of Yandex offerings. The Vladimir facility, described as a critical hub for Yandex services and for many…
SecurityOnline
